{"id":"CVE-2007-6388","url":"https://www.cyber-defence.io/tools/cve/CVE-2007-6388","generatedAt":"2026-10-27T18:33:29.740Z","title":"Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML…","description":"Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","published":"2008-01-08T18:46:00.000Z","lastModified":"2026-06-16T22:47:58.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":4.3,"severity":"MEDIUM","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N"},"cwe":["CWE-79"],"affected":["apache/http server"],"epss":{"score":0.75891,"percentile":0.99524,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 75.9%, higher than 100% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://httpd.apache.org/security/vulnerabilities_13.html","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://httpd.apache.org/security/vulnerabilities_20.html","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://httpd.apache.org/security/vulnerabilities_22.html","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000062.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28467","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28471","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28526","tags":["URL Repurposed"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28607","tags":["URL Repurposed"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28749","tags":["URL Repurposed"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28922","tags":["URL Repurposed"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28965","tags":["URL Repurposed"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28977","tags":["URL Repurposed"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29420","tags":["URL Repurposed"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29504","tags":["URL Repurposed"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29640","tags":["URL Repurposed"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29806","tags":["URL Repurposed"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29988","tags":["URL Repurposed"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30356","tags":["URL Repurposed"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30430","tags":["URL Repurposed"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30732","tags":["URL Repurposed"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31142","tags":["URL Repurposed"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32800","tags":["URL Repurposed"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33200","tags":["URL Repurposed"],"source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3541","tags":["URL Repurposed"],"source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019154","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.595748","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233623-1","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-032.htm","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=689039","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK62966","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK63273","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg24019245","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=PK59667&apar=only","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www.fujitsu.com/global/support/software/security/products-f/interstage-200808e.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:014","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:015","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:016","tags":["Patch","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html","tags":["Not Applicable"],"source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0004.html","tags":["Not Applicable"],"source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0005.html","tags":["Not Applicable"],"source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0006.html","tags":["Not Applicable"],"source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0007.html","tags":["Not Applicable"],"source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0008.html","tags":["Not Applicable"],"source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0009.html","tags":["Not Applicable"],"source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0261.html","tags":["Not Applicable"],"source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488082/100/0/threaded","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494428/100/0/threaded","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498523/100/0/threaded","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505990/100/0/threaded","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27237","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-575-1","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","tags":["Third Party Advisory","US Government Resource"],"source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0047","tags":["Permissions Required","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0447/references","tags":["Permissions Required","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0554","tags":["Permissions Required","Third Party Advisory"],"source":"cve@mitre.org"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-6388","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}